Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Change password from external interface (rest API) forcing user to change password at next logon

vishalagrawal1
New Contributor
New Contributor
changePassword  REST API forcing user to change password on next login via external facing application.
When user changes self-password through this external application (i.e. via changePassword REST API of Saviynt, the attribute pwdLastSet in Active Directory is being set to 0 (i.e. the checkbox "User must change password on next logon" is being changed to ON/TRUE).
This forces the user to change the password again, even when user changed their own password. This is undesired and gives a bad user experience. 
The desired behavior is to not force the user to change their AD account password when changePassword REST API is invoked for the user
2 REPLIES 2

mbinsale
Saviynt Employee
Saviynt Employee

Use the attribute "setarstasksource " as TRUE in the payload. 

Refer the below documentation for detailed explanation

https://documenter.getpostman.com/view/1797923/2s83mbojGM#7222367a-39d1-472b-8839-d63b00e31c7d

rushikeshvartak
All-Star
All-Star

setarstasksource - Values: true/false, default is false.If true, it will set source column in arstasks table with 'changeOwnPasswordFromAPI'. When source is 'changeOwnPasswordFromAPI',pwdLastSet is not set to “0” in ADconnector.

 

Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.